From 4076399191df8b6ab55884db064ac2d3148b4ac1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vladim=C3=ADr=20U=C5=BE=C3=ADk?= <vladimir.uzik@vertice.one>
Date: Wed, 5 Aug 2026 14:33:36 +0200
Subject: [PATCH] Gate audit-* github workflows to pantsbuild owner

---
 .github/workflows/audit-cargo.yml  | 1 +
 .github/workflows/audit-zizmor.yml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/workflows/audit-cargo.yml b/.github/workflows/audit-cargo.yml
index 6d1bcb54337..fbef87a60fe 100644
--- a/.github/workflows/audit-cargo.yml
+++ b/.github/workflows/audit-cargo.yml
@@ -13,6 +13,7 @@ permissions: {}
 jobs:
   cargo-audit:
     runs-on: ubuntu-latest
+    if: github.repository_owner == 'pantsbuild'
     steps:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
diff --git a/.github/workflows/audit-zizmor.yml b/.github/workflows/audit-zizmor.yml
index 015e20641bc..37265590286 100644
--- a/.github/workflows/audit-zizmor.yml
+++ b/.github/workflows/audit-zizmor.yml
@@ -13,6 +13,7 @@ permissions: {}
 jobs:
   zizmor-audit:
     runs-on: ubuntu-latest
+    if: github.repository_owner == 'pantsbuild'
     permissions:
       security-events: write
     steps: